IBM Verify

IBM Verify

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  Simply deny access

    Posted 09/16/19 03:54 PM
    Hi all,

    We are on ISAM 906. We have a Web Reverse Proxy that is setup with "enable-local-response-redirect = yes"

    We have one particular jct that is meant to be used by an app doing REST calls to the backend.

    The app will obtain an access token & call this jct with the access token.

    If the token is invalid or expired we simply want to deny the request with a 401 UNAUTHORIZED.

    So for this particular junction we would like to disable the local response-redirect, because if the token is invalid or expired we do not want to issue a 302 to the management page.

    We also do not want WebSeal to serve the local login page, we simply want to deny the access with a 401. The app is in charge of catching this response & trigger the process to obtain a new access token.

    Does anyone have an idea how I could make this happen?

    Thanks,
    Louis

    ------------------------------
    Louis Beaudry
    Access Management
    Intact Financial Corporation
    ------------------------------


  • 2.  RE: Simply deny access

    Posted 09/17/19 02:37 AM
    Hi Louis,

    You can easily disable the LRR redirect for a particular junction with this kind of stanza:

    [acnt-mgt:/apic]
    enable-html-redirect = yes
    enable-local-response-redirect = no

    We also added a "login.401.json" file in the management root of the RP that will be used by ISAM to respond to an unauthenticated json requests.
    You can learn more about this "Content Type Aware responses" here : https://www.ibm.com/blogs/security-identity-access/isam-and-single-paged-spa-applications/




    ------------------------------
    André Leruitte
    ------------------------------



  • 3.  RE: Simply deny access

    Posted 09/17/19 09:10 AM
    Thank you very much André, this is exactly what I was looking for. 

    Louis

    ------------------------------
    Louis Beaudry
    Access Management
    Intact Financial Corporation
    ------------------------------

    Original Message


Related Content